p2p

P2P Remote Desktop Remote Desktop P2P based - Portable, No Configuration or Installation Needed. How it works Compile and Open p2p.exe as admin in 2 different PC's. Copy the My Lan or Wan IP and communicate it to other peer and vice versa. The 2 peers have now the 2 endpoint to connect to, so pre...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC Disclaimer: This code is intended exclusively for educational purposes and authorized security testing. Unauthorized attacks against third-party systems are illegal. Vulnerability CVE-2025-26466 is a pre-authentication denial-of-service DoS vulnerability...

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC is a simple PowerShell script that runs on Exchange servers to identify indicators of compromises IOCs from the Hafnium activity release by Mircosoft on 2021-03-02 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. The script may be...

nse-exchange

nse-exchange Nmap NSE scripts to check against exchange vulnerability CVE-2022-41082. NSE scripts check most popular exposed services on the Internet. It is basic script which checks if virtual patching works. Examples Since, there is no patch currently - only workarounds are checked if host is...

CVE-2026-85042

creationtimestamp| type| source ---|---|--- 2026-09-03 19:47:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208831016095187 2026-09-03 20:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mund7zev6m2o 2026-09-03 22:07:56+00:00| seen|...

Microsoft Exchange Server MRSProxy Pre-Auth NTLM Relay RCE (CVE-2026-62911)

Binary data exchangecve-2026-62911.nbin...

CVE-2026-78689

creationtimestamp| type| source ---|---|--- 2026-09-02 18:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukjonpqaf2t 2026-09-02 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muklimnqxi2o 2026-09-02 19:12:02+00:00| seen|...

CVE-2026-20275

creationtimestamp| type| source ---|---|--- 2026-09-02 16:36:40+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117202419724203546 2026-09-02 21:03:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muktiekvsf2j 2026-09-03 08:45:50+00:00| seen|...

CVE-2026-84795

creationtimestamp| type| source ---|---|--- 2026-09-02 14:03:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117201815744827307 2026-09-02 14:07:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4b32moo22 2026-09-02 17:10:06+00:00| seen|...

CVE-2026-84327

creationtimestamp| type| source ---|---|--- 2026-09-02 00:12:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117198551537914778 2026-09-02 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:51+00:00| seen|...

exchange-0days-202103

exchange-0days-202103 Determinación de IoC para la explotación de CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 y CVE-2021-27065...

CVE-2026-18654

A flaw was found in AWS CLI. This vulnerability, located in the Elastic MapReduce EMR Secure Shell SSH helper commands, involves a lack of entity authentication during key exchange. A remote attacker, positioned between the client and the EMR cluster, could exploit this to intercept SSH sessions...

CVE-2026-78319 TOCTOU Vulnerability in file exchange

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

CVE-2026-78319

CVE-2026-78319 affects a file exchange service on affected products (specific product names not stated in the provided documents). The root cause is a Time-of-Check Time-of-Use (TOCTOU) race condition , which allows an unauthenticated remote attacker to bypass intended security controls and poten...

Linux Distros Unpatched Vulnerability : CVE-2026-18654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow...

CVE-2026-50199

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...

CVE-2026-50199

Wallos , an open-source self-hostable personal subscription tracker, is affected in versions prior to 4.9.1 . The vulnerable component is endpoints/currency/update_exchange.php, which loads the first Fixer/API Layer credential globally rather than the credential belonging to the authenticated use...

CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...

CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...

BIT-KEYCLOAK-2026-18215 Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant

Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...